A group of hackers are stealing money through fake loan apps. Furthermore, they also blackmail users by collecting various personal information and images and allowing them to use various parts of the smartphone.

Malicious apps can be easily downloaded and used on the Google Play Store without being exposed to Google's security systems. Android smartphone users are at risk from malicious apps, cybersecurity firm Eset says. 

ESET researchers say fake loan apps are designed not to arouse suspicion. In order to provide loans, these apps first force users to provide various personal information. Then request permission to use the phone's various devices such as camera, storage, messages, call logs, etc.

After obtaining permission, the application secretly monitors the user's device, collects all important and confidential information and sends it to the hacker. It then extorts money from users by threatening them to disclose this information and even force them to repay before taking out a loan.

ESET has identified 18 fake credit apps on the Google Play Store. These apps, developed by various organizations, have been downloaded more than a million times. This creates security risks for Android users. As a result, Google quickly removed 17 apps after receiving complaints against them.

The company also advises users to delete these apps from their phones for security reasons. Hackers are using fake lending apps to target users in Africa, Latin America and Southeast Asia.

The apps removed from the Google Play Store include 4S Cash, AA Credit, Amor Cash, Cartera Grande, Casho, Creditbus, EasyCash, EasyCredit, Finup Lending, Flashloan, Go Credito, Guabacash, Instantano Prestamo, Prestamos de Credito-Umicash, PrestamosCR Ditto, R Pido CR supra and Truneira.